5.5. Modifying the Attribute List

By default, the Referential Integrity plug-in is set up to check for and update the member, uniquemember, owner, and seeAlso attributes. You can add or delete attributes to be updated using the command line or the Console.

Note

Attributes set in the Referential Integrity plug-in's parameter list, must have equality indexing on all databases. Otherwise, the plug-in scans every entry of the database for matching the deleted or modified DN. This can have a significant performance impact. For details about checking and creating indexes, see Section 13.2, “Creating Standard Indexes”.

5.5.1. Modifying the Attribute List Using the Console

  1. Open the Property Editor in the Referential Integrity Postoperation plug-in's configuration. For details, see Section 1.9.3.2, “Configuring Plug-ins using the Console”.
  2. Update the attributes in the referint-membership-attr attribute.
    You can add additional values or delete existing ones using the Add Value and Delete Value buttons.
  3. Restart the Directory Server instance. See Section 1.4.2, “Starting and Stopping a Directory Server Instance Using the Console”.

5.5.2. Configuring the Attribute List from the Command Line

  1. Update the attribute list:
    • To add an additional attribute that should be checked and updated by the plug-in: 
      # ldapmodify -D "cn=Directory Manager" -W -x

dn: cn=referential integrity postoperation,cn=plugins,cn=config
add: referint-membership-attr
referint-membership-attr: attribute_name
    • To delete an attribute that should no longer be checked and updated by the plug-in: 
      # ldapmodify -D "cn=Directory Manager" -W -x

dn: cn=referential integrity postoperation,cn=plugins,cn=config
delete: referint-membership-attr
referint-membership-attr: attribute_name
  2. Restart the Directory Server instance: 
    # systemctl restart dirsrv@instance_name